CVE-2008-2364 - Secunia Advisories - Vulnerability Intelligence - Secunia.com

Vulnerability Intelligence

Vulnerability Scanning

Corporate Information

Secunia Advisories

Secunia Research

Binary Analysis

Home > Vulnerability Intelligence > Secunia Advisories > CVE-2008-2364

Secunia Advisories

Advisories by Product

Advisories by Vendor

Historic Advisories

Mailing Lists & RSS

Report Vulnerability

Business Solutions Restricted

Restricted

Partner Solutions Restricted

Restricted

CVE Reference: CVE-2008-2364
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-2364

Description: The ap_proxy_http_process_response function in mod_proxy_http.c in the mod_proxy module in the Apache HTTP Server 2.0.63 and 2.2.8 does not limit the number of forwarded interim responses, which allows remote HTTP servers to cause a denial of service (memory consumption) via a large number of interim responses.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/42987 ST 1020267 SAID Secunia Advisory: SA31904 Secunia Advisory: SA31651 Secunia Advisory: SA31416 Secunia Advisory: SA30621 Secunia Advisory: SA31026 Secunia Advisory: SA31404 Secunia Advisory: SA32222 Secunia Advisory: SA32685 REDHAT http://www.redhat.com/support/errata/RHSA-2008-0966.html http://rhn.redhat.com/errata/RHSA-2008-0967.html MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:195 HP http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01539432 GENTOO http://security.gentoo.org/glsa/glsa-200807-06.xml FEDORA CONFIRM http://www-01.ibm.com/support/docview.wss?uid=swg27008517 http://support.apple.com/kb/HT3216 http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/proxy/mod_proxy_http.c?r1=666154&r2=666153&pathrev=666154 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/494858/100/0/threaded BID 29653 31681 APPLE http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html AIXAPAR http://www-1.ibm.com/support/docview.wss?uid=swg1PK67579

Return to the previous page.

Contact | Terms & Conditions and Copyright | Report Vulnerability | Press | Jobs | About Secunia
Copyright Secunia 2002-2009